suprema.com
http://suprema.com/ CVE-2023-27167
MEDIUM
Suprema BioStar 2 v2.8.16 - SQL Injection
Record summary
CVE-2023-27167 has a selected CVSS score of 6.5 (medium); EIP currently links 1 catalogued exploit.
Description
Suprema BioStar 2 v2.8.16 was discovered to contain a SQL injection vulnerability via the values parameter at /users/absence?search_month=1.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 23, 2025 · Source: CVE List
Proofs of concept
1Catalogued exploits
ExploitDBSuprema BioStar 2 v2.8.16 - SQL InjectionExploitDB exploitby Yuriy (Vander) TsarenkoNot analyzed1 file
References
6biostar2.ciklum.net
https://biostar2.ciklum.net/api/users/absence?search_month=1 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2023-27167 packetstormsecurity.com
https://packetstormsecurity.com/files/171523/Suprema-BioStar-2-2.8.16-SQL-Injection.html protey.net
https://protey.net/threads/cve-2023-27167-suprema-biostar-2-v2-8-16-sql-injection.995 linkedin.com
https://www.linkedin.com/in/yuriy-tsarenko-a1453aa4